switched to environment variables for secrets